The NIST AI RMF MANAGE function includes the activity of 'responding to and recovering from AI risks.' Which action BEST exemplifies this activity?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the MANAGE function's response and recovery activity specifically addresses what happens when a risk materializes: activating the incident response, stopping harmful model outputs, reviewing decisions that may have been affected, and remediating impacts. This is the operationalization of risk response plans.
Full explanation below image
Full Explanation
B is correct because the MANAGE function's response and recovery activity specifically addresses what happens when a risk materializes: activating the incident response, stopping harmful model outputs, reviewing decisions that may have been affected, and remediating impacts. This is the operationalization of risk response plans. Annual risk assessments (A) belong to the MAP/MEASURE functions. Investment prioritization (C) is a governance/business strategy activity. Ethics training (D) is a GOVERN function activity.